[anaphor]

Does anyone know if this also affects the Requests library? Does it use these under the hood, or is it all httplib? (I'm pretty sure that's the case)

[acdha]

requests uses urllib3:

https://github.com/kennethreitz/requests/blob/75bdc998e2d430...

hannob opened an issue asking about this:

https://github.com/urllib3/urllib3/issues/1553

[hannob]

it probably does. Requests is built on top of urllib3 and the bug report mentions that urllib3 is affected as well.

[fireattack]

Are urllib and urllib3 same thing?

[jwandborg]

No, urllib is a standard library module in python 3. urllib3 is a 3rd-party package. See also https://news.ycombinator.com/item?id=19423367